ochenstarik-ui
a39f958a98
docs(agents): Claude PR4 review — gate PASS, deployment blocked on secrets/access
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-19 14:00:49 +07:00
ochenstarik-ui
5040ba800c
docs(agents): hand off PR4 review and deployment to Claude
CI / build-and-test (pull_request) Failing after 1s
2026-10-19 13:22:30 +07:00
ochenstarik-ui
930e6ee5e7
docs(agents): record stage1 evidence and independent rereviews
CI / build-and-test (pull_request) Failing after 5s
2026-10-19 13:18:19 +07:00
ochenstarik-ui
c5ede46bd1
docs(deploy): verify graceful proxy reload and staged activation
2026-10-19 13:16:01 +07:00
ochenstarik-ui
ca28be6ae6
Adapt VPS runbook to existing containerized Caddy and HAProxy
2026-10-19 13:06:30 +07:00
ochenstarik-ui
8284eb5d00
Merge remote-tracking branch 'forgejo/main' into codex/stage1-completion
2026-10-19 12:53:53 +07:00
ochenstarik-ui
6c36e0a866
docs(agents): R5 — VPS runs Caddy and HAProxy in containers
...
CI / build-and-test (pull_request) Failing after 1s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-19 12:50:36 +07:00
ochenstarik-ui
cce70c0b8f
Reject malformed VK imports and prevent mock live-smoke evidence
2026-10-19 12:50:29 +07:00
ochenstarik-ui
17faecd962
Prepare stage-one dependency, VK and deployment hardening
2026-10-19 12:44:13 +07:00
ochenstarik-ui
1a532465b0
docs(agents): VPS is 178.212.13.102 (shared with Forgejo)
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-19 12:01:50 +07:00
ochenstarik-ui
5598d2f38e
docs(agents): route domain access through the owner's VPS over WireGuard
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-19 12:01:16 +07:00
ochenstarik-ui
92df7346c7
docs(agents): add Codex stage-1 completion task
...
Task from Claude (orchestrator), forwarded by the owner on 2026-10-19:
dependency security fix, real-PostgreSQL integration run, live VK
smoke preparation, single-host deployment and domain access.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-19 11:59:16 +07:00
Ochenstarik
b625d70e8e
fix(security): resolve pre-auth shared identity lockout with valid session cache (Task 16)
2026-08-22 23:31:42 +07:00
Ochenstarik
ef8360bd4b
fix(security): enforce pre-auth rate limit before session store lookup (Task 15)
2026-08-22 21:20:27 +07:00
Ochenstarik
8e39ce0cbd
fix(validation): Task 14 reject excludeDuplicateComments in API schemas and upgrade CI node-version to 22
2026-08-21 22:49:37 +07:00
Ochenstarik
6510ea2a04
fix(security): Task 13 enforce mandatory authentication for POST /api/posts/preview
2026-08-21 22:32:27 +07:00
Ochenstarik
76ab7d0e77
fix(security): Task 12 add pre-authentication rate limiting to protect session store from flood
2026-08-21 22:27:33 +07:00
Ochenstarik
906148813e
chore: Task 11 dead code cleanup and capability validation unification
2026-08-21 19:49:16 +07:00
Ochenstarik
1883a86402
fix(ui): Task 10 improve UI error handling, remove alerts and handle unauthenticated state
2026-08-21 19:45:30 +07:00
Ochenstarik
3feb0d5834
fix(storage): Task 09 ensure eligibleParticipantsCount parity between Memory and Prisma repository drivers
2026-08-21 19:37:41 +07:00
Ochenstarik
4e095553a1
test(prisma): Task 08 add Prisma integration test harness, separate vitest configs and update CI workflow
2026-08-21 19:35:07 +07:00
Ochenstarik
2da8b01b1b
fix(core): Task 07 resolve duplicate comments semantics, fix commentsCount merging, and maintain legacy snapshot hash compatibility
2026-08-21 19:31:01 +07:00
Ochenstarik
8741569817
feat(public): Task 06 implement public giveaway verification endpoint and page
2026-08-21 19:11:03 +07:00
Ochenstarik
1a27a10847
feat(security): Task 05 enforce CSRF validation and strict rate limiting on post preview route
2026-08-21 19:06:57 +07:00
Ochenstarik
4b8c6b1039
feat(api): Task 04 implement safe atomic snapshot unlock SNAPSHOT_LOCKED -> READY
2026-08-21 19:01:26 +07:00
Ochenstarik
fb6ae61628
feat(infra): Task 03 upgrade to Next.js 16 and React 19 resolving high security advisories
2026-08-21 18:42:40 +07:00
Ochenstarik
6f3fd44333
feat(security): Task 02 client identity and user-scoped rate limiting
2026-08-21 18:34:13 +07:00
Ochenstarik
92f6d19225
feat(auth): Task 01 add persistent OAuthTransaction and Session Prisma stores
2026-08-21 17:53:38 +07:00
Ochenstarik
b2888950cd
docs(report): update Phase 2.4 report with UNVERIFIED and migration details and fix test typechecks
2026-08-21 08:44:34 +07:00
Ochenstarik
3279f287fb
fix(snapshot): Phase 2.4.1 enforce atomic snapshot lock, single lock invariant and direct seed commitment binding
2026-08-20 18:23:48 +07:00
Ochenstarik
78151572bd
fix(draw): Phase 2.4 enforce seed pre-commit at snapshot lock to prevent grinding
2026-08-20 17:24:07 +07:00
Ochenstarik
9927e74421
fix(auth): Phase 2.3.1.1 truthful giveaway detail capability based on credential status
2026-08-18 15:03:23 +07:00
ochenstarik-ui
0ce91d7b0d
docs(agents): define Randomayzer agent workspace workflow
2026-08-18 14:59:10 +07:00
Ochenstarik
4e4370d6f1
fix(vk): Phase 2.3.1 derive effectiveCapabilities from actual resolved auth mode
2026-08-18 14:50:47 +07:00
Ochenstarik
1495067501
chore(tooling): add AI security review exporter
2026-08-18 14:46:09 +07:00